research-competitors-category-pass

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is built to consume and process data from various untrusted external sources, which could contain malicious instructions designed to influence the agent.
  • Ingestion points: SKILL.md (Sections 1-5) directs the agent to gather information from public platforms such as Reddit, Hacker News, LinkedIn, Quora, YouTube, TikTok, and search results.
  • Boundary markers: There are no delimiters or instructions provided to help the agent ignore potentially malicious content within the fetched data.
  • Capability inventory: The agent uses search and browsing tools to perform its tasks.
  • Sanitization: The skill does not describe any methods for cleaning or validating the retrieved external data before processing.
  • [EXTERNAL_DOWNLOADS]: The skill performs automated web searches and page fetches from well-known public platforms.
  • Evidence: The instructions in SKILL.md specify conducting searches and fetches across platforms including Google, Reddit, Hacker News, LinkedIn, Quora, YouTube, TikTok, and Meta Ad Library to compile market intelligence.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 01:55 PM